$ rpki-client -vvf repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft File: F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft (raw, json) Hash identifier: FG2CRlxJgA5L1flYUdMZ1wEatSf81KFfKwsjyJMFTnY= Subject key identifier: 43:D2:CF:66:71:A4:7A:1D:8E:5D:B7:3D:C1:F5:2A:EE:4F:EE:71:06 Authority key identifier: F2:CC:4B:38:29:5B:A8:B2:11:B5:5A:53:DA:0A:CB:76:DA:63:6E:70 Certificate issuer: /CN=F2CC4B38295BA8B211B55A53DA0ACB76DA636E70 Certificate serial: 66F597021EF0E1737EC4D21D0AD1FADF82D2F5EB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft Manifest number: 0375 Signing time: Sun 29 Jun 2025 21:52:03 +0000 Manifest this update: Sun 29 Jun 2025 21:47:03 +0000 Manifest next update: Thu 03 Jul 2025 01:50:03 +0000 Files and hashes: 1: F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.crl (hash: gPYvu/dJGuExGkav5Gm0bkbK6yl6ofuMrIRkXlAzYRQ=) 2: 3130332e3136382e34372e302f32342d3234203d3e20313432333130.roa (hash: nH/6GtgoV/9v3sMWYjneb+fyVV81krMAog9BySpXr4E=) 3: 3130332e3136382e34362e302f32342d3234203d3e20313432333130.roa (hash: LxlhGvniVX1DZYQ1W62yOkB/KkKuWv10+O7NsPderxM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.crl rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 01:50:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:f5:97:02:1e:f0:e1:73:7e:c4:d2:1d:0a:d1:fa:df:82:d2:f5:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2CC4B38295BA8B211B55A53DA0ACB76DA636E70 Validity Not Before: Jun 29 21:47:03 2025 GMT Not After : Jul 3 01:50:03 2025 GMT Subject: CN=43D2CF6671A47A1D8E5DB73DC1F52AEE4FEE7106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:69:ab:c5:c5:f9:12:fb:f6:cf:08:26:81:8a: 26:11:75:65:d1:fb:d3:b9:b7:3b:4a:9e:ef:cb:44: 9b:00:95:af:81:4a:7a:fd:f1:13:09:6b:c2:ea:d6: 6e:60:a3:2b:df:0d:80:d2:50:fb:6a:d9:09:38:e1: b8:8b:6b:e8:97:6f:11:42:29:f8:d5:19:3e:fe:22: 8d:f7:2c:5d:22:18:77:4f:aa:a3:eb:e2:d8:ab:bd: d2:94:46:df:8f:7c:b5:91:1b:9c:8b:1b:d5:3c:a5: 14:c1:51:59:6e:91:31:71:20:80:a8:ba:fe:a7:06: 59:10:83:59:b1:06:28:42:72:a8:a7:11:36:2c:32: 57:63:88:d4:f6:eb:ce:d0:60:d2:08:c4:2d:93:fc: ba:a2:ee:a2:2c:61:cc:d5:31:aa:19:e5:35:05:ad: 62:ea:83:6e:8f:e0:39:bb:34:5a:67:16:2b:b6:b5: cb:05:18:c8:85:b5:6e:e4:cd:ec:15:5f:ec:a7:0a: c4:5a:42:ea:8b:ad:56:96:87:94:66:4f:eb:76:73: 1f:84:2a:20:74:70:57:7c:c4:67:73:24:fe:39:ca: cc:9c:a1:f8:52:8e:87:a0:e3:21:7c:15:fe:06:de: 5e:a3:44:bf:b4:79:44:e7:35:14:a7:14:71:35:00: 9a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D2:CF:66:71:A4:7A:1D:8E:5D:B7:3D:C1:F5:2A:EE:4F:EE:71:06 X509v3 Authority Key Identifier: keyid:F2:CC:4B:38:29:5B:A8:B2:11:B5:5A:53:DA:0A:CB:76:DA:63:6E:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:04:c7:54:c6:3e:d3:d2:86:ca:f5:80:2f:46:fb:43:66:0f: 96:fc:35:65:d1:dd:7c:da:8c:ff:57:b1:50:e4:4a:1a:98:fd: 28:5c:7b:b1:c7:54:8d:6d:59:6b:aa:a2:0a:37:76:de:f5:d0: b0:9b:ac:13:36:f7:dc:f4:a8:a8:ca:44:36:e9:be:50:d1:cc: ad:65:98:b2:22:e2:8a:15:49:ba:70:20:e2:fc:5e:69:07:1b: 0c:21:50:66:cb:7f:c1:5f:9b:97:22:b1:68:29:a9:df:1c:07: 4b:63:23:63:c8:1c:83:77:69:41:38:72:71:d9:e4:a4:c8:cf: 43:47:c7:a3:c4:a3:36:87:70:fb:33:38:70:e3:9d:7d:d1:82: dc:32:d2:5b:dd:21:50:1b:63:2b:c1:60:e2:5a:fc:b8:e9:12: be:0d:a3:19:f8:07:40:0f:b5:0a:d9:64:13:66:f6:f8:36:4a: 4d:ff:84:39:06:44:4a:f6:de:d6:a1:66:01:5c:4b:b2:0b:da: f1:40:fd:3e:47:cd:4b:fd:5f:63:04:7e:cc:c3:88:2f:30:0c: 62:1f:a6:cb:b4:e1:c7:d3:bb:90:cc:36:21:dc:34:fe:cc:b3: 69:5e:a6:9a:7b:94:13:87:7c:5c:56:f2:3a:bc:8b:e8:49:89: 34:ea:31:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZvWXAh7w4XN+xNIdCtH634LS9eswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJDQzRCMzgyOTVCQThCMjExQjU1QTUzREEwQUNCNzZE QTYzNkU3MDAeFw0yNTA2MjkyMTQ3MDNaFw0yNTA3MDMwMTUwMDNaMDMxMTAvBgNV BAMTKDQzRDJDRjY2NzFBNDdBMUQ4RTVEQjczREMxRjUyQUVFNEZFRTcxMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8aavFxfkS+/bPCCaBiiYRdWXR +9O5tztKnu/LRJsAla+BSnr98RMJa8Lq1m5goyvfDYDSUPtq2Qk44biLa+iXbxFC KfjVGT7+Io33LF0iGHdPqqPr4tirvdKURt+PfLWRG5yLG9U8pRTBUVlukTFxIICo uv6nBlkQg1mxBihCcqinETYsMldjiNT2687QYNIIxC2T/Lqi7qIsYczVMaoZ5TUF rWLqg26P4Dm7NFpnFiu2tcsFGMiFtW7kzewVX+ynCsRaQuqLrVaWh5RmT+t2cx+E KiB0cFd8xGdzJP45ysycofhSjoeg4yF8Ff4G3l6jRL+0eUTnNRSnFHE1AJoVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ9LPZnGkeh2OXbc9wfUq7k/ucQYwHwYDVR0j BBgwFoAU8sxLOClbqLIRtVpT2grLdtpjbnAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NDI5M2M2NC1lYTAwLTQxM2YtOTA5MC0yYjE5MGIxYTQ1YWYvMC9GMkNDNEIzODI5 NUJBOEIyMTFCNTVBNTNEQTBBQ0I3NkRBNjM2RTcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjJDQzRCMzgyOTVCQThCMjExQjU1QTUzREEwQUNCNzZEQTYz NkU3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjQyOTNjNjQtZWEwMC00MTNmLTkw OTAtMmIxOTBiMWE0NWFmLzAvRjJDQzRCMzgyOTVCQThCMjExQjU1QTUzREEwQUNC NzZEQTYzNkU3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIkEx1TGPtPShsr1gC9G+0NmD5b8NWXR3Xza jP9XsVDkShqY/Shce7HHVI1tWWuqogo3dt710LCbrBM299z0qKjKRDbpvlDRzK1l mLIi4ooVSbpwIOL8XmkHGwwhUGbLf8Ffm5cisWgpqd8cB0tjI2PIHIN3aUE4cnHZ 5KTIz0NHx6PEozaHcPszOHDjnX3Rgtwy0lvdIVAbYyvBYOJa/LjpEr4Noxn4B0AP tQrZZBNm9vg2Sk3/hDkGREr23tahZgFcS7IL2vFA/T5HzUv9X2MEfszDiC8wDGIf psu04cfTu5DMNiHcNP7Ms2leppp7lBOHfFxW8jq8i+hJiTTqMag= -----END CERTIFICATE-----Generated at Tue Jul 1 05:51:53 2025 by rpki-client